{"id":44009,"date":"2023-09-09T01:38:04","date_gmt":"2023-07-16T12:08:01","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/docker%e5%b0%86%e8%a2%ab%e5%8f%96%e4%bb%a3%ef%bc%9f%e4%b8%8b%e4%b8%80%e4%bb%a3%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e5%b7%a5%e5%85%b7podman%e5%92%8cbuildah\/"},"modified":"2024-04-30T22:04:29","modified_gmt":"2024-04-30T14:04:29","slug":"docker%e5%b0%86%e8%a2%ab%e5%8f%96%e4%bb%a3%ef%bc%9f%e4%b8%8b%e4%b8%80%e4%bb%a3%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e5%b7%a5%e5%85%b7podman%e5%92%8cbuildah","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/docker%e5%b0%86%e8%a2%ab%e5%8f%96%e4%bb%a3%ef%bc%9f%e4%b8%8b%e4%b8%80%e4%bb%a3%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e5%b7%a5%e5%85%b7podman%e5%92%8cbuildah\/","title":{"rendered":"Docker\u5c06\u88ab\u53d6\u4ee3\uff1f\u4e0b\u4e00\u4ee3\u5bb9\u5668\u7ba1\u7406\u5de5\u5177Podman\u548cBuildah"},"content":{"rendered":"<h1>\u7b80\u4ecb<\/h1>\n<p>\u8c08\u5230\u5bb9\u5668\uff0c\u5c31\u4f1a\u60f3\u5230Docker\uff0c\u8fd9\u4e24\u4e2a\u8bcd\u662f\u5bc6\u5207\u76f8\u5173\u7684\u3002\u7136\u800c\uff0cRed Hat\u5f00\u53d1\u7684Red Hat Enterprise Linux (RHEL)\u7684\u6700\u65b0\u7248\u672c8\u7cfb\u4e0d\u518d\u5305\u542bDocker\uff0c\u5e76\u4e14\u4e0d\u518d\u63d0\u4f9b\u652f\u6301\u3002Docker\u7684\u8bbe\u8ba1\u5305\u62ec\u4e86Docker Daemon\u7684\u6240\u6709\u529f\u80fd\uff0c\u53ef\u4ee5\u8fdb\u884cDocker\u955c\u50cf\u7684\u63a8\u9001\u548c\u62c9\u53d6\uff0c\u4ee5\u53ca\u5b58\u50a8\u7ba1\u7406\u7b49\uff0c\u975e\u5e38\u65b9\u4fbf\u5b9e\u7528\u3002\u7136\u800c\uff0c\u4e5f\u5b58\u5728\u4e00\u4e9b\u95ee\u9898\u3002\u5176\u4e2d\u6700\u5927\u7684\u95ee\u9898\u6709\u4ee5\u4e0b\u4e24\u70b9\u3002<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u30c7\u30fc\u30e2\u30f3\u3092\u8d77\u52d5\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u3001\u30d7\u30ed\u30bb\u30b9\u304c\u843d\u3061\u308b\u3068\u6a5f\u80fd\u304c\u505c\u6b62\u3059\u308b<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">root\u6a29\u9650\u3067\u30b3\u30f3\u30c6\u30ca\u3092\u8d77\u52d5\u3057\u306a\u3051\u308c\u3070\u306a\u3089\u305a\u3001\u8106\u5f31\u6027\u3084\u8a2d\u5b9a\u4e0d\u5099\u304c\u3042\u308b\u5834\u5408\u6a29\u9650\u596a\u53d6\u3055\u308c\u308b\u6050\u308c\u304c\u3042\u308b<\/ul>\n<p>\u4e3a\u4e86\u89e3\u51b3\u8fd9\u4e2a\u95ee\u9898\uff0c\u5f00\u53d1\u4e86\u4e00\u4e9b\u65b0\u7684\u5bb9\u5668\u5de5\u5177\u3002\u8fd9\u4e9b\u5de5\u5177\u5305\u62ec\u6211\u4eec\u8981\u4ecb\u7ecd\u7684Podman\u548cBuildah\u3002\u867d\u7136\u5173\u4e8e\u5b83\u4eec\u7684\u8be6\u7ec6\u4fe1\u606f\u53ef\u4ee5\u5728Red Hat\u7684\u5b98\u65b9\u53c2\u8003\u8d44\u6599\u4e2d\u627e\u5230\uff0c\u4f46\u6211\u5e0c\u671b\u80fd\u591f\u4eb2\u81ea\u52a8\u624b\u5b66\u4e60\uff0c\u5e76\u5c06\u5b66\u4e60\u7ed3\u679c\u5199\u6210\u4e00\u7bc7\u6587\u7ae0\u3002<\/p>\n<h1>Podman \u662f\u4ec0\u4e48<\/h1>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d55d237434c4406cd76cc\/5-0.png\" alt=\"6be7d7353415417e558a1aa7f0ca966a.png\" \/><\/div>\n<p>Podman\u4e0eDocker\u5728\u547d\u4ee4\u884c\u65b9\u9762\u5177\u6709\u4e92\u64cd\u4f5c\u6027\uff0c\u53ef\u4ee5\u901a\u8fc7podman\u547d\u4ee4\u4ee5\u7c7b\u4f3cdocker\u547d\u4ee4\u7684\u65b9\u5f0f\u5b9e\u73b0\u3002\u7136\u800c\uff0c\u7531\u4e8e\u5220\u9664\u4e86\u90e8\u5206docker\u9009\u9879\uff0c\u6240\u4ee5\u5e76\u975e\u5b8c\u5168\u517c\u5bb9\u3002(\u53c2\u8003\u6587\u732e\u7b2c8\u7ae0 \u5173\u4e8e\u5bb9\u5668\u547d\u4ee4\u884c\u7684\u8d44\u6599)<\/p>\n<h1>Buidah\u662f\u4ec0\u4e48\uff1f<\/h1>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d55d237434c4406cd76cc\/8-0.png\" alt=\"d08a2c27315e8830e4a200b19fb0f9f7.png\" \/><\/div>\n<p>\u4ee5\u4e0b\u662f Buildah \u7684\u7279\u70b9\uff0c\u5c3d\u7ba1\u4e0e Podman \u7684\u529f\u80fd\u5b58\u5728\u91cd\u53e0\uff0c\u4f46 Buildah \u53ea\u5177\u5907\u6784\u5efa\u5bb9\u5668\u955c\u50cf\u6240\u9700\u7684\u6700\u57fa\u672c\u529f\u80fd\uff0c\u5e76\u53d7\u5230\u529f\u80fd\u9650\u5236\u3002<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Daemon\u306f\u4f7f\u7528\u3055\u308c\u306a\u3044<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">scratch(\u7a7a)\u30a4\u30e1\u30fc\u30b8\u304b\u3089\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3092\u30d3\u30eb\u30c9\u53ef\u80fd<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\u30a4\u30e1\u30fc\u30b8\u306b\u30d3\u30eb\u30c9\u30c4\u30fc\u30eb\u304c\u542b\u307e\u308c\u305a\u3001\u30a4\u30e1\u30fc\u30b8\u30b5\u30a4\u30ba\u304c\u5c0f\u3055\u3044<\/ul>\n<p>\u7531\u4e8e\u53ef\u4ee5\u6784\u5efascratch\u6620\u50cf\uff0c\u56e0\u6b64\u53ef\u4ee5\u83b7\u53d6\u6bd4\u4ece\u5b98\u65b9\u4ed3\u5e93\u83b7\u53d6\u7684\u6620\u50cf\u66f4\u8f7b\u91cf\u7684\u5bb9\u5668\u6620\u50cf\u3002<br \/>\n\uff08\u4f8b\u5982\uff1a\u4f7f\u7528scratch\u6620\u50cf\u5b89\u88c5RHEL\u5305\uff0c\u5e76\u6dfb\u52a0Apache\u7b49\uff09<br \/>\n\u5f53\u7136\uff0c\u4e5f\u53ef\u4ee5\u4eceDockerfile\u6784\u5efa\u6620\u50cf\u3002<br \/>\n\u6211\u5df2\u7ecf\u7b80\u5355\u4ecb\u7ecd\u4e86\u8fd9\u4e24\u4e2a\u5de5\u5177\uff0c\u6211\u5e0c\u671b\u80fd\u591f\u5b89\u88c5\u5728\u5b9e\u9645\u8bbe\u5907\u4e0a\u5e76\u8fdb\u884c\u4f53\u9a8c\u3002<\/p>\n<h1>\u5404\u79cd\u73af\u5883\u5de5\u5177<\/h1>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">OS:CentOS8.2<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">podman ver 1.6.4<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">buildah ver 1.11.6<\/ul>\n<p>\u6211\u8ba4\u4e3aRedHat\u7684\u5b98\u65b9\u7f51\u9875\u4e0a\u63d0\u4f9b\u7684\u5b89\u88c5\u65b9\u6cd5\u548c\u5404\u79cd\u5de5\u5177\u7684\u4f7f\u7528\u65b9\u6cd5\u6700\u4e3a\u6e05\u6670\u6613\u61c2\uff0c\u6240\u4ee5\u6211\u57fa\u672c\u4e0a\u4f1a\u6309\u7167\u8fd9\u4e2a\u6765\u8fdb\u884c\u5404\u79cd\u9a8c\u8bc1\u3002<\/p>\n<h1>\u5404\u79cd\u5b89\u88c5\u548c\u521d\u59cb\u8bbe\u7f6e\u3002<\/h1>\n<p>\u5982\u679c\u60a8\u60f3\u9010\u4e2a\u5b89\u88c5\uff0c\u4e5f\u53ef\u4ee5\u8fd9\u6837\u505a\uff0c\u4f46\u5982\u679c\u60a8\u662f\u4f7f\u7528Red Hat\u7cfb\u5217\u7684Linux\u53d1\u884c\u7248\u672c\u7684\u8bdd\uff0c\u60a8\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u6765\u8fdb\u884c\u6279\u91cf\u5b89\u88c5\u3002<\/p>\n<pre class=\"post-pre\"><code># yum(dnf) module install -y container-tools\r\n<\/code><\/pre>\n<p>\u4e0b\u4e00\u6b65\u662f\u6839\u636e\u4e4b\u524d\u63d0\u5230\u7684\uff0c\u5728root\u4ee5\u5916\u7684\u7528\u6237\u53ef\u4ee5\u64cd\u4f5c\u5bb9\u5668\u7684\u524d\u63d0\u4e0b\uff0c\u8fdb\u884c\u65e0\u6839\u5bb9\u5668\u7684\u8bbe\u7f6e\u3002<\/p>\n<h4>\u589e\u52a0\u7528\u6237\u547d\u540d\u7a7a\u95f4<\/h4>\n<p>\u540d\u7a31\u7a7a\u9593\uff08namespace\uff09\u662f\u4e00\u7a2e\u529f\u80fd\uff0c\u5b58\u5728\u65bc\u7cfb\u7d71\u4e2d\u95dc\u65bc\u591a\u7a2e\u4e0d\u540c\u985e\u578b\u8cc7\u6e90\u7684\u6240\u5c6c\u904e\u7a0b\uff0c\u4e26\u4e14\u5728\u8996\u89ba\u4e0a\u70ba\u6240\u5c6c\u904e\u7a0b\u5c55\u793a\u7368\u7acb\u8cc7\u6e90\u3002\u7531\u65bc\u6211\u4ecd\u5728\u5b78\u7fd2\u968e\u6bb5\uff0c\u7121\u6cd5\u63d0\u4f9b\u8a73\u7d30\u89e3\u91cb\uff0c\u4f46\u4f7f\u7528\u8005\u540d\u7a31\u7a7a\u9593\u5c07\u5c55\u793a\u7368\u7acb\u7684\u4f7f\u7528\u8005ID\u548c\u7d44ID\u3002\u8a73\u7d30\u5167\u5bb9\u8acb\u53c3\u80032020\u5e74Software Design\u4e03\u6708\u865f\u7684\u300c\u8a66\u8457\u7406\u89e3Linux\u67b6\u69cb\u89d2\u843d\u300d\uff08https:\/\/gihyo.jp\/magazine\/SD\/archive\/2020\/202007\uff09\u3002<br \/>\n\u63a5\u4e0b\u4f86\uff0c\u6211\u5c07\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u4f86\u589e\u52a0\u8a72\u540d\u7a31\u7a7a\u9593\u3002<\/p>\n<pre class=\"post-pre\"><code># echo \"user.max_user_namespaces=28633\" &gt; \/etc\/sysctl.d\/userns.conf\r\n# sysctl -p \/etc\/sysctl.d\/userns.conf\r\n<\/code><\/pre>\n<p>\u6211\u5c06\u5728\u5c06\u7528\u6237\u66f4\u6539\u4e3a\u975eroot\u7528\u6237\u7684\u60c5\u51b5\u4e0b\uff0c\u5c1d\u8bd5\u4f7f\u7528podman\u83b7\u53d6\u955c\u50cf\u6765\u786e\u8ba4\u8fd9\u79cd\u72b6\u6001\u3002<\/p>\n<pre class=\"post-pre\"><code>$ podman pull registry.access.redhat.com\/ubi8\/ubi\r\n$ podman run registry.access.redhat.com\/ubi8\/ubi cat \/etc\/os-release\r\nNAME=\"Red Hat Enterprise Linux\"\r\nVERSION=\"8.2 (Ootpa)\"\r\nID=\"rhel\"\r\nID_LIKE=\"fedora\"\r\nVERSION_ID=\"8.2\"\r\nPLATFORM_ID=\"platform:el8\"\r\nPRETTY_NAME=\"Red Hat Enterprise Linux 8.2 (Ootpa)\"\r\nANSI_COLOR=\"0;31\"\r\nCPE_NAME=\"cpe:\/o:redhat:enterprise_linux:8.2:GA\"\r\nHOME_URL=\"https:\/\/www.redhat.com\/\"\r\nBUG_REPORT_URL=\"https:\/\/bugzilla.redhat.com\/\"\r\nREDHAT_BUGZILLA_PRODUCT=\"Red Hat Enterprise Linux 8\"\r\nREDHAT_BUGZILLA_PRODUCT_VERSION=8.2\r\nREDHAT_SUPPORT_PRODUCT=\"Red Hat Enterprise Linux\"\r\nREDHAT_SUPPORT_PRODUCT_VERSION=\"8.2\"\r\n<\/code><\/pre>\n<p>\u6211\u6b63\u5728\u4f7f\u7528\u7531Red Hat\u63d0\u4f9b\u7684Universal Base Images (UBI)\u83b7\u53d6\u6620\u50cf\uff0c\u5e76\u542f\u52a8\u5bb9\u5668\u3002<br \/>\n\u6211\u4f7f\u7528cat \/etc\/os-release\u547d\u4ee4\u5728\u542f\u52a8\u7684\u5bb9\u5668\u4e0a\u67e5\u770b\u5bb9\u5668\u7684\u64cd\u4f5c\u7cfb\u7edf\u7248\u672c\u4fe1\u606f\u3002<br \/>\n\u6211\u786e\u8ba4\u80fd\u591f\u4ee5\u975eroot\u7528\u6237\u8eab\u4efd\u8fd0\u884cpodman\u5e76\u5bf9\u5bb9\u5668\u8fdb\u884c\u64cd\u4f5c\u3002\u63a5\u4e0b\u6765\uff0c\u6211\u5c06\u8bf4\u660e\u5404\u79cd\u64cd\u4f5c\u3002<\/p>\n<h1>\u56fe\u50cf\u641c\u7d22\u548c\u63d0\u53d6<\/h1>\n<p>\u5728\u4e2d\u56fd\u6211\u4eec\u53ef\u4ee5\u901a\u8fc7\u4f7f\u7528 &#8220;podman search &lt;\u955c\u50cf\u540d\u79f0&gt;&#8221; \u6765\u641c\u7d22\u955c\u50cf\u3002<\/p>\n<pre class=\"post-pre\"><code>$ podman search node\r\nINDEX        NAME                                                                                  DESCRIPTION                                       STARS   OFFICIAL   AUTOMATED\r\nredhat.com   registry.access.redhat.com\/openshift3\/node                                            Provides a containerized OpenShift Node with...   0    \r\nredhat.com   registry.access.redhat.com\/openshift3\/prometheus-node-exporter                        Prometheus exporter for hardware and OS metr...   0    \r\nredhat.com   registry.access.redhat.com\/codeready-workspaces\/stacks-node                           Red Hat CodeReady Workspaces - Node Stack co...   0    \r\nredhat.com   registry.access.redhat.com\/rhel7\/kubernetes-scheduler                                 The Kubernetes scheduler watches for new un-...   0    \r\nredhat.com   registry.access.redhat.com\/openshift3\/metrics-hawkular-openshift-agent                Hawkular OpenShift Agent is a Hawkular feed ...   0    \r\nredhat.com   registry.access.redhat.com\/openshift3\/ose-node-problem-detector                       Node Problem Detector monitors OpenShift nod...   0    \r\nredhat.com   registry.access.redhat.com\/openshift3\/ose-metrics-heapster                            Retrieves container and node metrics from an...   0    \r\nredhat.com   registry.access.redhat.com\/openshift3\/metrics-heapster                                Retrieves container and node metrics from an...   0    \r\nredhat.com   registry.access.redhat.com\/openshift3\/ose-keepalived-ipfailover                       Optional Pod providing keepalived support fo...   0    \r\nredhat.com   registry.access.redhat.com\/openshift3\/ose-metrics-hawkular-openshift-agent            Hawkular OpenShift Agent is a Hawkular feed ...   0    \r\nredhat.com   registry.access.redhat.com\/openshift3\/ose-node                                        Provides a containerized OpenShift Node with...   0    \r\nredhat.com   registry.access.redhat.com\/amqstreams-1\/amqstreams10-kafkaconnect-openshift           AMQ Streams image for running an Apache Kafk...   0    \r\nredhat.io    registry.redhat.io\/openshift3\/node                                                    Provides a containerized OpenShift Node with...   0    \r\nredhat.io    registry.redhat.io\/openshift4\/ose-prometheus-node-exporter                            Prometheus exporter for hardware and OS metr...   0    \r\nredhat.io    registry.redhat.io\/openshift4\/ose-cluster-node-tuning-operator                        'OpenShift Node Tuning Operator'                  0    \r\nredhat.io    registry.redhat.io\/openshift4\/ose-node                                                'OpenShift Container Platform Node'               0    \r\nredhat.io    registry.redhat.io\/openshift3\/prometheus-node-exporter                                Prometheus exporter for hardware and OS metr...   0    \r\nredhat.io    registry.redhat.io\/openshift4\/ose-csi-node-driver-registrar                           CSI Node Driver Registar                          0    \r\nredhat.io    registry.redhat.io\/openshift4\/ose-node-feature-discovery                              Node Feature Discovery Container Image            0    \r\nredhat.io    registry.redhat.io\/openshift4\/ose-cluster-nfd-operator                                Node Feature Discovery (NFD) Operator             0    \r\nredhat.io    registry.redhat.io\/codeready-workspaces\/stacks-node                                   Red Hat CodeReady Workspaces - Node Stack co...   0    \r\nredhat.io    registry.redhat.io\/codeready-workspaces\/stacks-node-rhel8                             Red Hat CodeReady Workspaces - Node 10 Stack      0    \r\nredhat.io    registry.redhat.io\/codeready-workspaces\/plugin-java8-rhel8                            Red Hat CodeReady Workspaces - Java 8 plugin...   0    \r\nredhat.io    registry.redhat.io\/rhel7\/kubernetes-scheduler                                         The Kubernetes scheduler watches for new un-...   0    \r\nredhat.io    registry.redhat.io\/openshift3\/metrics-hawkular-openshift-agent                        Hawkular OpenShift Agent is a Hawkular feed ...   0    \r\nredhat.io    registry.redhat.io\/openshift3\/ose-node-problem-detector                               Node Problem Detector monitors OpenShift nod...   0    \r\nredhat.io    registry.redhat.io\/openshift3\/ose-metrics-heapster                                    Retrieves container and node metrics from an...   0    \r\nredhat.io    registry.redhat.io\/openshift3\/metrics-heapster                                        Retrieves container and node metrics from an...   0    \r\nredhat.io    registry.redhat.io\/openshift3\/ose-metrics-hawkular-openshift-agent                    Hawkular OpenShift Agent is a Hawkular feed ...   0    \r\nredhat.io    registry.redhat.io\/openshift3\/ose-keepalived-ipfailover                               Optional Pod providing keepalived support fo...   0    \r\nredhat.io    registry.redhat.io\/container-native-virtualization\/node-maintenance-operator          Red Hat Container Native Virtualization imag...   0    \r\nredhat.io    registry.redhat.io\/openshift3\/ose-node                                                Provides a containerized OpenShift Node with...   0    \r\nredhat.io    registry.redhat.io\/amqstreams-1\/amqstreams10-kafkaconnect-openshift                   AMQ Streams image for running an Apache Kafk...   0    \r\nredhat.io    registry.redhat.io\/openshift4\/ose-cluster-machine-approver                            'Validates and approves CSRs for nodes attem...   0    \r\nredhat.io    registry.redhat.io\/container-native-virtiualization\/node-maintenance-rhel8-operator   Red Hat Container Native Virtualization imag...   0    \r\nredhat.io    registry.redhat.io\/openshift4\/ose-ptp                                                 Linuxptp daemonset to apply ptp configuratio...   0    \r\nredhat.io    registry.redhat.io\/container-native-virtualization\/kubevirt-cpu-node-labeller         Red Hat Container Native Virtualization imag...   0    \r\ndocker.io    docker.io\/library\/node                                                                Node.js is a JavaScript-based platform for s...   9152    [OK]\r\ndocker.io    docker.io\/nodered\/node-red-docker                                                     Deprecated - older Node-RED Docker images.        351                [OK]\r\ndocker.io    docker.io\/bitnami\/node                                                                Bitnami Node.js Docker Image                      45                 [OK]\r\ndocker.io    docker.io\/appsvc\/node                                                                 Azure App Service Node.js dockerfiles             14                 [OK]\r\ndocker.io    docker.io\/circleci\/node                                                               Node.js is a JavaScript-based platform for s...   110  \r\ndocker.io    docker.io\/prom\/node-exporter                                                                                                            193                [OK]\r\ndocker.io    docker.io\/calico\/node                                                                 Calico's per-host DaemonSet container image....   19                 [OK]\r\ndocker.io    docker.io\/library\/mongo-express                                                       Web-based MongoDB admin interface, written w...   754     [OK]\r\ndocker.io    docker.io\/iron\/node                                                                   Tiny Node image                                   29   \r\ndocker.io    docker.io\/bitnami\/node-exporter                                                       Bitnami Node Exporter Docker Image                2                  [OK]\r\ndocker.io    docker.io\/kkarczmarczyk\/node-yarn                                                     Node docker image with yarn package manager ...   48                 [OK]\r\ndocker.io    docker.io\/nodered\/node-red                                                            Low-code programming for event-driven applic...   175  \r\ndocker.io    docker.io\/nodecg\/nodecg                                                               Create broadcast graphics using Node.js and ...   1                  [OK]\r\ndocker.io    docker.io\/selenium\/node-chrome                                                                                                          213                [OK]\r\ndocker.io    docker.io\/appsvctest\/node                                                             node build                                        0                  [OK]\r\ndocker.io    docker.io\/library\/iojs                                                                io.js is an npm compatible platform original...   135     [OK]\r\ndocker.io    docker.io\/camptocamp\/node-collectd                                                    rancher node monitoring agent                     0                  [OK]\r\ndocker.io    docker.io\/ppc64le\/node                                                                Node.js is a JavaScript-based platform for s...   2    \r\ndocker.io    docker.io\/testim\/node-chrome                                                          Selenium Chrome Node + Testim Extension           0                  [OK]\r\ndocker.io    docker.io\/digitallyseamless\/nodejs-bower-grunt                                         Node.js w\/ Bower &amp; Grunt Dockerfile for tru...   48                 [OK]\r\ndocker.io    docker.io\/cusspvz\/node                                                                ? Super small Node.js container (~15MB) b...      8                  [OK]\r\ndocker.io    docker.io\/ogazitt\/node-env                                                            node app that shows environment variables         2    \r\ndocker.io    docker.io\/basi\/node-exporter                                                          Node exporter image that allows to expose th...   8                  [OK]\r\ndocker.io    docker.io\/selenium\/node-firefox                                                                                                         136                [OK]\r\ndocker.io    docker.io\/tarampampam\/node                                                            Docker image, based on node, with some addit...   2                  [OK]\r\n<\/code><\/pre>\n<p>\u60a8\u53ef\u4ee5\u4f7f\u7528&#8211;filter=is-official\u6765\u8fc7\u6ee4\u53ea\u5305\u542b\u5b98\u65b9\u955c\u50cf\u7684\u5206\u53d1\u6e90\u3002<\/p>\n<pre class=\"post-pre\"><code>$ podman search node --filter=is-official\r\nINDEX       NAME                              DESCRIPTION                                       STARS   OFFICIAL   AUTOMATED\r\ndocker.io   docker.io\/library\/node            Node.js is a JavaScript-based platform for s...   9152    [OK]\r\ndocker.io   docker.io\/library\/mongo-express   Web-based MongoDB admin interface, written w...   757     [OK]\r\ndocker.io   docker.io\/library\/iojs            io.js is an npm compatible platform original...   135     [OK]\r\n<\/code><\/pre>\n<p>\u7136\u540e\uff0c\u5c31\u50cfDocker\u4e00\u6837\uff0c\u53ef\u4ee5\u4f7f\u7528podman pull &lt;\u955c\u50cf\u540d\u79f0&gt;\u5c06\u955c\u50cf\u62c9\u53d6\u5230\u672c\u5730\u3002<\/p>\n<pre class=\"post-pre\"><code>$ podman pull docker.io\/library\/node\r\nTrying to pull docker.io\/library\/node...\r\nGetting image source signatures\r\nCopying blob de30e8b35015 done\r\nCopying blob 419e7ae5bb1e done\r\nCopying blob 7ec8a0667334 done\r\nCopying blob 848839e0cd3b done\r\n\uff5e\uff5e\uff5e\uff5e\uff5e\u4e2d\u7565\uff5e\uff5e\uff5e\uff5e\uff5e\uff5e\uff5e\r\n$ podman images\r\nREPOSITORY                            TAG      IMAGE ID       CREATED       SIZE\r\ndocker.io\/library\/node                latest   784e696f5060   2 weeks ago   972 MB\r\n<\/code><\/pre>\n<p>Podman\u7684\u5bb9\u5668\u955c\u50cf\u5b58\u50a8\u5728Red Hat\u5b98\u65b9\u7f51\u7ad9\u4e0a\u3002\uff08https:\/\/catalog.redhat.com\/software\/containers\/explore)<\/p>\n<h1>\u542f\u52a8\u5bb9\u5668<\/h1>\n<p>Podman\u4e0eDocker\u4e00\u6837\uff0c\u53ef\u4ee5\u4f7f\u7528podman run\u547d\u4ee4\u6765\u542f\u52a8\u5bb9\u5668\u3002<\/p>\n<pre class=\"post-pre\"><code>$ podman run -it --rm node bash\r\nroot@cc0bf2c6cc65:\/# cat \/etc\/os-release \r\nPRETTY_NAME=\"Debian GNU\/Linux 9 (stretch)\"\r\nNAME=\"Debian GNU\/Linux\"\r\nVERSION_ID=\"9\"\r\nVERSION=\"9 (stretch)\"\r\nVERSION_CODENAME=stretch\r\nID=debian\r\nHOME_URL=\"https:\/\/www.debian.org\/\"\r\nSUPPORT_URL=\"https:\/\/www.debian.org\/support\"\r\nBUG_REPORT_URL=\"https:\/\/bugs.debian.org\/\"\r\n\r\n<\/code><\/pre>\n<h1>\u6784\u5efa\u5f62\u8c61<\/h1>\n<p>\u5728buildah\u547d\u4ee4\u4e2d\uff0c\u53ef\u4ee5\u6784\u5efa\u955c\u50cf\uff0c\u4e5f\u53ef\u4ee5\u4f7f\u7528&#8221;buildah bud&#8221;\u547d\u4ee4\u6784\u5efaDockerfile\u3002\uff08\u8bf7\u53c2\u8003\u5b98\u65b9\u6559\u7a0b\uff09<br \/>\n\u53e6\u5916\uff0c\u901a\u8fc7&#8221;buildah images&#8221;\u547d\u4ee4\uff0c\u60a8\u8fd8\u53ef\u4ee5\u663e\u793a\u4f7f\u7528podman\u62c9\u53d6\u7684\u955c\u50cf\u5217\u8868\u3002<\/p>\n<pre class=\"post-pre\"><code>$ podman images\r\nREPOSITORY                                    TAG      IMAGE ID       CREATED          SIZE\r\nlocalhost\/johndoe\/webserver                   latest   6d36abc8f72f   24 minutes ago   245 MB\r\nregistry.access.redhat.com\/ubi8\/ubi           latest   a1f8c9699786   5 weeks ago      211 MB\r\nregistry.access.redhat.com\/ubi8\/ubi-minimal   latest   86c870596572   5 weeks ago      146 MB\r\n\r\n$ buildah images\r\nREPOSITORY                                    TAG      IMAGE ID       CREATED          SIZE\r\nlocalhost\/johndoe\/webserver                   latest   6d36abc8f72f   24 minutes ago   245 MB\r\nregistry.access.redhat.com\/ubi8\/ubi           latest   a1f8c9699786   5 weeks ago      211 MB\r\nregistry.access.redhat.com\/ubi8\/ubi-minimal   latest   86c870596572   5 weeks ago      146 MB\r\n\r\n<\/code><\/pre>\n<p>\u6211\u4eec\u5c06\u4f7f\u7528buildah\u547d\u4ee4\u5bf9\u4ee5\u4e0b\u683c\u5f0f\u7684Dockerfile\u8fdb\u884c\u6784\u5efa\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c\"># ls<\/span>\r\nDockerfile  myecho\r\n<span class=\"c\"># cat Dockerfile<\/span>\r\n<span class=\"k\">FROM<\/span><span class=\"s\"> registry.access.redhat.com\/ubi8\/ubi:latest<\/span>\r\n<span class=\"k\">ADD<\/span><span class=\"s\"> myecho \/usr\/local\/bin<\/span>\r\n<span class=\"k\">ENTRYPOINT<\/span><span class=\"s\"> \"\/usr\/local\/bin\/myecho\"<\/span>\r\n<span class=\"c\"># cat myecho<\/span>\r\necho \"This container works!\"\r\n# chmod 755 myecho\r\n<span class=\"c\"># .\/myecho<\/span>\r\nThis container works!\r\n<\/code><\/pre>\n<p>\u521b\u5efaDockerfile\u540e\uff0c\u8fd0\u884cbuildah bud -t fedora-httpd .\u547d\u4ee4\u6765\u6784\u5efa\u955c\u50cf\u3002<br \/>\n\u6839\u636e\u6587\u4ef6\u4e2d\u7684\u6307\u4ee4\uff0c\u955c\u50cf\u5c06\u88ab\u6784\u5efa\u3002<br \/>\n\u5b8c\u6210\u6784\u5efa\u540e\uff0c\u5c1d\u8bd5\u8fd0\u884c\u5bb9\u5668\u3002<\/p>\n<pre class=\"post-pre\"><code>$ buildah  images\r\nREPOSITORY                            TAG      IMAGE ID       CREATED          SIZE\r\nlocalhost\/myecho-container            latest   5098f73df28e   50 seconds ago   211 MB\r\n$ podman run localhost\/myecho-container\r\nThis container works!\r\n\r\n<\/code><\/pre>\n<p>\u987a\u4fbf\u8bf4\u4e00\u4e0b\uff0c\u5173\u4e8ebuildah\u7684\u6559\u7a0b\u4e2d\u63d0\u5230\u53ef\u4ee5\u4f7f\u7528buildah run\u6765\u542f\u52a8\u5bb9\u5668\uff0c\u4f46\u662f\u6211\u5c1d\u8bd5\u5931\u8d25\u4e86\u3002<\/p>\n<pre class=\"post-pre\"><code>$ buildah run localhost\/myecho-container\r\ncommand must be specified\r\nERRO exit status 1                 \r\n<\/code><\/pre>\n<h1>\u5220\u9664\u5bb9\u5668\u3001\u6620\u50cf<\/h1>\n<p>\u4e0eDocker\u76f8\u540c\uff0c\u53ef\u4ee5\u4f7f\u7528rm\u9009\u9879\u6765\u5220\u9664\u5bb9\u5668\u548c\u955c\u50cf\u3002<\/p>\n<pre class=\"post-pre\"><code>$ podman ps -a\r\nCONTAINER ID  IMAGE                                       COMMAND        CREATED        STATUS                         PORTS                 NAMES\r\n06a79ab009f3  registry.access.redhat.com\/ubi8\/ubi:latest  \/bin\/bash      3 minutes ago  Exited (1) About a minute ago                        mystifying_jepsen\r\ne8a1c6fbc91f  localhost\/johndoe\/webserver:latest          -D FOREGROUND  29 hours ago   Exited (135) 28 hours ago      0.0.0.0:8080-&gt;80\/tcp  agitated_morse\r\n$ podman rm e8a1c6fbc91f\r\ne8a1c6fbc91f9252f13a34e6a2275078cdadef196e135bb32330784b8d012ad3\r\n$ podman ps -a\r\nCONTAINER ID  IMAGE                                       COMMAND        CREATED        STATUS                    PORTS                 NAMES\r\n06a79ab009f3  registry.access.redhat.com\/ubi8\/ubi:latest  \/bin\/bash      4 minutes ago  Exited (1) 3 minutes ago                        mystifying_jepsen\r\n<\/code><\/pre>\n<p>\u540c\u6837\uff0c\u4f60\u4e5f\u53ef\u4ee5\u4f7f\u7528RMI\u9009\u9879\u6765\u5220\u9664\u56fe\u50cf\u3002<\/p>\n<pre class=\"post-pre\"><code>$ podman images\r\nREPOSITORY                                    TAG      IMAGE ID       CREATED        SIZE\r\nlocalhost\/johndoe\/webserver                   latest   6d36abc8f72f   29 hours ago   245 MB\r\nregistry.access.redhat.com\/ubi8\/ubi           latest   a1f8c9699786   5 weeks ago    211 MB\r\nregistry.access.redhat.com\/ubi8\/ubi-minimal   latest   86c870596572   5 weeks ago    146 MB\r\ndocker.io\/library\/fedora                      latest   a368cbcfa678   7 weeks ago    189 MB\r\n\r\n$ podman rmi docker.io\/library\/fedora\r\nUntagged: docker.io\/library\/fedora:latest\r\nDeleted: a368cbcfa6789bc347345f6d19132afe138b62ff5373d2aa5f37120277c90b54\r\n$ podman rmi 86c870596572\r\nUntagged: registry.access.redhat.com\/ubi8\/ubi-minimal:latest\r\nDeleted: 86c870596572a5b4fe016f4fb7ae9d181e88df6ac91d2cb15250c5e053cfad15\r\n\r\n$ podman images\r\nREPOSITORY                            TAG      IMAGE ID       CREATED        SIZE\r\nlocalhost\/johndoe\/webserver           latest   6d36abc8f72f   29 hours ago   245 MB\r\nregistry.access.redhat.com\/ubi8\/ubi   latest   a1f8c9699786   5 weeks ago    211 MB\r\n<\/code><\/pre>\n<h1>\u521b\u5efaKubernetes Pod Yaml\u6587\u4ef6<\/h1>\n<p>Podman\u7684\u53e6\u4e00\u4e2a\u7279\u70b9\u662f\uff0c\u53ef\u4ee5\u4f7f\u7528podman generate\u547d\u4ee4\u521b\u5efaKubernetes\u7684Pods\u6587\u4ef6\u3002<br \/>\n\u8fd0\u884cmariadb\u5bb9\u5668\u8fdb\u7a0b\uff0c\u5e76\u901a\u8fc7`podman generate`\u547d\u4ee4\u8f93\u51faKubernetes YAML\uff0c\u7136\u540e\u5c06\u5176\u4fdd\u5b58\u81f3\u6587\u4ef6\u4e2d\u3002<\/p>\n<pre class=\"post-pre\"><code>$ podman run -d -e MYSQL_USER=user -e MYSQL_PASSWORD=pass \\\r\n&gt;      -e MYSQL_DATABASE=db -p 3306:3306 --name mymariadb rhscl\/mariadb-102-rhel7\r\nTrying to pull registry.access.redhat.com\/rhscl\/mariadb-102-rhel7...\r\nGetting image source signatures\r\nCopying blob 9e7a6dc796f0 done\r\nCopying blob e7021e0589e9 done\r\nCopying blob fc5b206e9329 [======================================] 72.7MiB \/ 72.7MiB\r\nCopying blob 98b39311ee6a done\r\nCopying config 5ca39d258f done\r\nWriting manifest to image destination\r\nStoring signatures\r\n8e994c65e7a24febfa57c6cc79c44c7fce37c8593a087d9efb5c45b994169b48\r\n\r\n$ podman ps -a\r\nCONTAINER ID  IMAGE                                                      COMMAND     CREATED         STATUS             PORTS                   NAMES\r\n8e994c65e7a2  registry.access.redhat.com\/rhscl\/mariadb-102-rhel7:latest  run-mysqld  41 seconds ago  Up 40 seconds ago  0.0.0.0:3306-&gt;3306\/tcp  mymariadb\r\n\r\n$ podman generate kube mymariadb &gt; mymariadbkube.yaml\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"c1\"># Generation of Kubernetes YAML is still under development!<\/span>\r\n<span class=\"c1\">#<\/span>\r\n<span class=\"c1\"># Save the output of this file and use kubectl create -f to import<\/span>\r\n<span class=\"c1\"># it into Kubernetes.<\/span>\r\n<span class=\"c1\">#<\/span>\r\n<span class=\"c1\"># Created with podman-1.9.3<\/span>\r\n<span class=\"na\">apiVersion<\/span><span class=\"pi\">:<\/span> <span class=\"s\">v1<\/span>\r\n<span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">Pod<\/span>\r\n<span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">creationTimestamp<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">2020-08-29T05:37:11Z\"<\/span>\r\n  <span class=\"na\">labels<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">app<\/span><span class=\"pi\">:<\/span> <span class=\"s\">mymariadb<\/span>\r\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">mymariadb<\/span>\r\n<span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">containers<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"pi\">-<\/span> <span class=\"na\">command<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"s\">run-mysqld<\/span>\r\n    <span class=\"na\">env<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">PATH<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">\/opt\/app-root\/src\/bin:\/opt\/app-root\/bin:\/usr\/local\/sbin:\/usr\/local\/bin:\/usr\/sbin:\/usr\/bin:\/sbin:\/bin<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">TERM<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">xterm<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">HOSTNAME<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">container<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">oci<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">STI_SCRIPTS_URL<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">image:\/\/\/usr\/libexec\/s2i<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">MYSQL_PASSWORD<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">pass<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ENABLED_COLLECTIONS<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">rh-mariadb102<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">PROMPT_COMMAND<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">. \/usr\/share\/container-scripts\/mysql\/scl_enable<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">HOME<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">\/var\/lib\/mysql<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ENV<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">\/usr\/share\/container-scripts\/mysql\/scl_enable<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">PLATFORM<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">el7<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">STI_SCRIPTS_PATH<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">\/usr\/libexec\/s2i<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">MYSQL_USER<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">user<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">MYSQL_DATABASE<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">db<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">DESCRIPTION<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">MariaDB is a multi-user, multi-threaded SQL database server. The container<\/span>\r\n        <span class=\"s\">image provides a containerized packaging of the MariaDB mysqld daemon and<\/span>\r\n        <span class=\"s\">client application. The mysqld server daemon accepts connections from clients<\/span>\r\n        <span class=\"s\">and provides access to content from MariaDB databases on behalf of the clients.<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">SUMMARY<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">MariaDB 10.2 SQL database server<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">APP_ROOT<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">\/opt\/app-root<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">MYSQL_PREFIX<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">\/opt\/rh\/rh-mariadb102\/root\/usr<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">APP_DATA<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">\/opt\/app-root\/src<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">BASH_ENV<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">\/usr\/share\/container-scripts\/mysql\/scl_enable<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">CONTAINER_SCRIPTS_PATH<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s\">\/usr\/share\/container-scripts\/mysql<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">MYSQL_VERSION<\/span>\r\n      <span class=\"na\">value<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">10.2\"<\/span>\r\n    <span class=\"na\">image<\/span><span class=\"pi\">:<\/span> <span class=\"s\">registry.access.redhat.com\/rhscl\/mariadb-102-rhel7:latest<\/span>\r\n    <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">mymariadb<\/span>\r\n    <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"pi\">-<\/span> <span class=\"na\">containerPort<\/span><span class=\"pi\">:<\/span> <span class=\"m\">3306<\/span>\r\n      <span class=\"na\">hostPort<\/span><span class=\"pi\">:<\/span> <span class=\"m\">3306<\/span>\r\n      <span class=\"na\">protocol<\/span><span class=\"pi\">:<\/span> <span class=\"s\">TCP<\/span>\r\n    <span class=\"na\">resources<\/span><span class=\"pi\">:<\/span> <span class=\"pi\">{}<\/span>\r\n    <span class=\"na\">securityContext<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">allowPrivilegeEscalation<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n      <span class=\"na\">capabilities<\/span><span class=\"pi\">:<\/span> <span class=\"pi\">{}<\/span>\r\n      <span class=\"na\">privileged<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n      <span class=\"na\">readOnlyRootFilesystem<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n      <span class=\"na\">runAsGroup<\/span><span class=\"pi\">:<\/span> <span class=\"m\">27<\/span>\r\n      <span class=\"na\">runAsUser<\/span><span class=\"pi\">:<\/span> <span class=\"m\">27<\/span>\r\n      <span class=\"na\">seLinuxOptions<\/span><span class=\"pi\">:<\/span> <span class=\"pi\">{}<\/span>\r\n    <span class=\"na\">workingDir<\/span><span class=\"pi\">:<\/span> <span class=\"s\">\/opt\/app-root\/src<\/span>\r\n<span class=\"na\">status<\/span><span class=\"pi\">:<\/span> <span class=\"pi\">{}<\/span>\r\n<\/code><\/pre>\n<p>\u7136\u540e\uff0c\u60a8\u53ef\u4ee5\u4f7f\u7528kubectl\u547d\u4ee4\u57fa\u4e8e\u8fd9\u4e2ayaml\u6587\u4ef6\u521b\u5efaPods\u3002<br \/>\nkubectl create -f mymariadbkube.yaml<\/p>\n<h1>\u603b\u7ed3<\/h1>\n<p>\u6211\u5411\u5927\u5bb6\u89e3\u91ca\u4e86\u5404\u79cd\u5de5\u5177\u7684\u64cd\u4f5c\u65b9\u6cd5\u3002<br \/>\n\u8fd9\u4e24\u4e2a\u547d\u4ee4\u662f\u5728\u4e0b\u4e00\u7bc7\u6587\u7ae0\u4e2d\u4ecb\u7ecd\u7684Ansible-bender\u5185\u90e8\u6240\u4f7f\u7528\u7684\u5de5\u5177\uff0c\u53ef\u4ee5\u4f7f\u7528Ansible\u6765\u521b\u5efa\u5bb9\u5668\u6620\u50cf\u3002<br \/>\n\u867d\u7136\u6211\u5f88\u5c11\u542c\u8bf4\u4eba\u4eec\u4f7f\u7528Podman\u548cBuildah\uff0c\u4f46\u6211\u8ba4\u4e3a\u5b83\u4eec\u5c06\u6210\u4e3a\u672a\u6765\u66ff\u4ee3Docker\u7684\u5bb9\u5668\u7ba1\u7406\u5de5\u5177\uff0c\u6240\u4ee5\u6211\u5e0c\u671b\u80fd\u66f4\u6df1\u5165\u5730\u7406\u89e3\u5e76\u4e13\u6ce8\u4e8e\u4f7f\u7528\u5b83\u4eec\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u7b80\u4ecb \u8c08\u5230\u5bb9\u5668\uff0c\u5c31\u4f1a\u60f3\u5230Docker\uff0c\u8fd9\u4e24\u4e2a\u8bcd\u662f\u5bc6\u5207\u76f8\u5173\u7684\u3002\u7136\u800c\uff0cRed Hat\u5f00\u53d1\u7684Red Hat Ente [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-44009","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Docker\u5c06\u88ab\u53d6\u4ee3\uff1f\u4e0b\u4e00\u4ee3\u5bb9\u5668\u7ba1\u7406\u5de5\u5177Podman\u548cBuildah - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/docker\u5c06\u88ab\u53d6\u4ee3\uff1f\u4e0b\u4e00\u4ee3\u5bb9\u5668\u7ba1\u7406\u5de5\u5177podman\u548cbuildah\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Docker\u5c06\u88ab\u53d6\u4ee3\uff1f\u4e0b\u4e00\u4ee3\u5bb9\u5668\u7ba1\u7406\u5de5\u5177Podman\u548cBuildah\" \/>\n<meta property=\"og:description\" content=\"\u7b80\u4ecb \u8c08\u5230\u5bb9\u5668\uff0c\u5c31\u4f1a\u60f3\u5230Docker\uff0c\u8fd9\u4e24\u4e2a\u8bcd\u662f\u5bc6\u5207\u76f8\u5173\u7684\u3002\u7136\u800c\uff0cRed Hat\u5f00\u53d1\u7684Red Hat Ente [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/docker\u5c06\u88ab\u53d6\u4ee3\uff1f\u4e0b\u4e00\u4ee3\u5bb9\u5668\u7ba1\u7406\u5de5\u5177podman\u548cbuildah\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-16T12:08:01+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-30T14:04:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d55d237434c4406cd76cc\/5-0.png\" \/>\n<meta name=\"author\" content=\"\u65b0, \u97f5\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u65b0, \u97f5\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/docker%e5%b0%86%e8%a2%ab%e5%8f%96%e4%bb%a3%ef%bc%9f%e4%b8%8b%e4%b8%80%e4%bb%a3%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e5%b7%a5%e5%85%b7podman%e5%92%8cbuildah\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/docker%e5%b0%86%e8%a2%ab%e5%8f%96%e4%bb%a3%ef%bc%9f%e4%b8%8b%e4%b8%80%e4%bb%a3%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e5%b7%a5%e5%85%b7podman%e5%92%8cbuildah\/\",\"name\":\"Docker\u5c06\u88ab\u53d6\u4ee3\uff1f\u4e0b\u4e00\u4ee3\u5bb9\u5668\u7ba1\u7406\u5de5\u5177Podman\u548cBuildah - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-07-16T12:08:01+00:00\",\"dateModified\":\"2024-04-30T14:04:29+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/4ba4019495123db3038fd0809e6959c9\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/docker%e5%b0%86%e8%a2%ab%e5%8f%96%e4%bb%a3%ef%bc%9f%e4%b8%8b%e4%b8%80%e4%bb%a3%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e5%b7%a5%e5%85%b7podman%e5%92%8cbuildah\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/docker%e5%b0%86%e8%a2%ab%e5%8f%96%e4%bb%a3%ef%bc%9f%e4%b8%8b%e4%b8%80%e4%bb%a3%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e5%b7%a5%e5%85%b7podman%e5%92%8cbuildah\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/docker%e5%b0%86%e8%a2%ab%e5%8f%96%e4%bb%a3%ef%bc%9f%e4%b8%8b%e4%b8%80%e4%bb%a3%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e5%b7%a5%e5%85%b7podman%e5%92%8cbuildah\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Docker\u5c06\u88ab\u53d6\u4ee3\uff1f\u4e0b\u4e00\u4ee3\u5bb9\u5668\u7ba1\u7406\u5de5\u5177Podman\u548cBuildah\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/4ba4019495123db3038fd0809e6959c9\",\"name\":\"\u65b0, \u97f5\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d484b6c6e4ae82e8a9efea989e1d2af46d9b6ef128101e63b18f559fca0ae627?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d484b6c6e4ae82e8a9efea989e1d2af46d9b6ef128101e63b18f559fca0ae627?s=96&d=mm&r=g\",\"caption\":\"\u65b0, \u97f5\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/yunxin\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/docker%e5%b0%86%e8%a2%ab%e5%8f%96%e4%bb%a3%ef%bc%9f%e4%b8%8b%e4%b8%80%e4%bb%a3%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e5%b7%a5%e5%85%b7podman%e5%92%8cbuildah\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Docker\u5c06\u88ab\u53d6\u4ee3\uff1f\u4e0b\u4e00\u4ee3\u5bb9\u5668\u7ba1\u7406\u5de5\u5177Podman\u548cBuildah - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/docker\u5c06\u88ab\u53d6\u4ee3\uff1f\u4e0b\u4e00\u4ee3\u5bb9\u5668\u7ba1\u7406\u5de5\u5177podman\u548cbuildah\/","og_locale":"zh_CN","og_type":"article","og_title":"Docker\u5c06\u88ab\u53d6\u4ee3\uff1f\u4e0b\u4e00\u4ee3\u5bb9\u5668\u7ba1\u7406\u5de5\u5177Podman\u548cBuildah","og_description":"\u7b80\u4ecb \u8c08\u5230\u5bb9\u5668\uff0c\u5c31\u4f1a\u60f3\u5230Docker\uff0c\u8fd9\u4e24\u4e2a\u8bcd\u662f\u5bc6\u5207\u76f8\u5173\u7684\u3002\u7136\u800c\uff0cRed Hat\u5f00\u53d1\u7684Red Hat Ente [&hellip;]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/docker\u5c06\u88ab\u53d6\u4ee3\uff1f\u4e0b\u4e00\u4ee3\u5bb9\u5668\u7ba1\u7406\u5de5\u5177podman\u548cbuildah\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-07-16T12:08:01+00:00","article_modified_time":"2024-04-30T14:04:29+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d55d237434c4406cd76cc\/5-0.png"}],"author":"\u65b0, \u97f5","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u65b0, \u97f5","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"10 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/docker%e5%b0%86%e8%a2%ab%e5%8f%96%e4%bb%a3%ef%bc%9f%e4%b8%8b%e4%b8%80%e4%bb%a3%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e5%b7%a5%e5%85%b7podman%e5%92%8cbuildah\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/docker%e5%b0%86%e8%a2%ab%e5%8f%96%e4%bb%a3%ef%bc%9f%e4%b8%8b%e4%b8%80%e4%bb%a3%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e5%b7%a5%e5%85%b7podman%e5%92%8cbuildah\/","name":"Docker\u5c06\u88ab\u53d6\u4ee3\uff1f\u4e0b\u4e00\u4ee3\u5bb9\u5668\u7ba1\u7406\u5de5\u5177Podman\u548cBuildah - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-07-16T12:08:01+00:00","dateModified":"2024-04-30T14:04:29+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/4ba4019495123db3038fd0809e6959c9"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/docker%e5%b0%86%e8%a2%ab%e5%8f%96%e4%bb%a3%ef%bc%9f%e4%b8%8b%e4%b8%80%e4%bb%a3%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e5%b7%a5%e5%85%b7podman%e5%92%8cbuildah\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/docker%e5%b0%86%e8%a2%ab%e5%8f%96%e4%bb%a3%ef%bc%9f%e4%b8%8b%e4%b8%80%e4%bb%a3%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e5%b7%a5%e5%85%b7podman%e5%92%8cbuildah\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/docker%e5%b0%86%e8%a2%ab%e5%8f%96%e4%bb%a3%ef%bc%9f%e4%b8%8b%e4%b8%80%e4%bb%a3%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e5%b7%a5%e5%85%b7podman%e5%92%8cbuildah\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"Docker\u5c06\u88ab\u53d6\u4ee3\uff1f\u4e0b\u4e00\u4ee3\u5bb9\u5668\u7ba1\u7406\u5de5\u5177Podman\u548cBuildah"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/4ba4019495123db3038fd0809e6959c9","name":"\u65b0, \u97f5","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d484b6c6e4ae82e8a9efea989e1d2af46d9b6ef128101e63b18f559fca0ae627?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d484b6c6e4ae82e8a9efea989e1d2af46d9b6ef128101e63b18f559fca0ae627?s=96&d=mm&r=g","caption":"\u65b0, \u97f5"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/yunxin\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/docker%e5%b0%86%e8%a2%ab%e5%8f%96%e4%bb%a3%ef%bc%9f%e4%b8%8b%e4%b8%80%e4%bb%a3%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e5%b7%a5%e5%85%b7podman%e5%92%8cbuildah\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/44009","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=44009"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/44009\/revisions"}],"predecessor-version":[{"id":94568,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/44009\/revisions\/94568"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=44009"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=44009"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=44009"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}